$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: 1JIqv4JTLcSFog3dQ3ewxkgYtOz/NwX6bm4rxk2TrFs= Subject key identifier: B7:A0:76:A7:1E:EC:73:66:0B:8B:06:F6:CB:6F:ED:AD:8E:A6:8A:6A Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 12C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 12B2 Signing time: Sun 02 Nov 2025 17:03:59 +0000 Manifest this update: Sun 02 Nov 2025 17:03:58 +0000 Manifest next update: Sun 09 Nov 2025 17:03:58 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: JWBJILTbcT1wI4J1JgpL5dkZ63xb/nqfmGmqb9YQeEI=) 2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: Xp+CN4LqcT/0Y+vEkAwmxb+Nkk14BBORVU2fsmUOWF4=) 3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: S7qopPNPvDDhohJ5GF/e64A8sjKuyyCv3KgOWSOnrzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4806 (0x12c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: Nov 2 17:03:58 2025 GMT Not After : Nov 9 17:03:58 2025 GMT Subject: CN=69078eff-be1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:cb:73:68:97:65:34:79:19:6e:40:f8:4d: eb:fe:d9:48:5f:43:d4:1e:f9:ba:9c:a4:43:47:4e: ed:01:9d:a6:a0:93:89:6e:f9:f6:a3:82:f6:d0:dd: 75:4f:18:ff:a3:9c:47:bd:0a:72:58:0f:d2:5e:c1: 6c:57:b4:e5:e4:cc:31:ef:96:35:20:a1:9a:48:a5: cc:5f:15:68:19:62:1c:b3:8c:06:7f:63:5e:22:37: be:50:96:ae:6d:a6:33:7b:45:07:e3:a2:e9:4d:38: e9:dd:a8:a3:67:39:84:3d:2f:be:c5:7f:c2:8e:d3: f3:74:0c:35:08:cc:c4:92:d4:46:c5:ed:b5:46:f3: 4d:d1:43:33:49:26:3c:6f:92:e0:04:ee:12:28:eb: 84:c8:34:db:5a:7b:1e:34:f5:07:4d:80:49:ab:de: 0a:a8:b2:ba:7c:bb:6d:ad:b0:d0:2c:41:ab:2a:35: 50:e0:3a:cb:01:c3:8e:f7:d9:d9:4e:51:93:17:bd: 58:29:1c:8c:9d:d4:28:33:a4:06:46:72:b7:fa:69: 2b:30:8e:62:fd:b3:ba:aa:a2:a1:83:39:06:46:2e: c0:7b:3d:b0:15:60:45:72:9b:2e:81:88:20:fb:1a: 84:40:29:36:70:51:c0:82:49:59:eb:2e:2b:67:41: ab:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A0:76:A7:1E:EC:73:66:0B:8B:06:F6:CB:6F:ED:AD:8E:A6:8A:6A X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:80:62:4d:fb:28:19:c0:ca:fd:21:cc:e7:b3:63:26:d7:7d: 01:eb:06:e8:22:35:c1:99:d1:5b:d3:5d:17:62:55:9b:c1:a3: 1b:d1:16:5a:c7:2f:bc:ee:fb:f7:d8:c6:f3:66:01:bc:9c:54: 32:e2:be:77:ad:47:e5:8d:34:9d:3a:d7:e2:fc:eb:fa:7c:0e: fd:0f:c4:c8:da:2e:a3:4d:4a:e3:1c:ba:05:4d:30:ab:15:4c: d4:96:6a:fd:41:cd:0b:92:d4:97:2b:16:ac:31:c6:84:3f:1b: 89:98:bb:c4:b7:f2:da:4f:d6:de:fd:6f:65:39:52:4d:e4:fd: 75:af:4f:82:00:eb:f0:d0:95:d9:5d:71:f8:53:b2:66:88:9b: 14:3a:7b:a3:e4:e4:00:b2:a4:06:c4:e8:a2:52:67:82:d7:c3: 13:03:89:88:97:e6:01:01:a6:68:64:c8:15:52:f3:99:ca:31: 95:87:61:0f:f7:46:3b:70:c8:53:2b:00:29:6f:c0:65:27:5d: 1e:c7:c2:c2:fb:1a:a3:9e:13:38:7e:ce:4b:67:31:ab:31:46: a2:a7:1e:f4:22:0c:8b:39:87:30:c6:49:02:3b:4d:d3:d7:e5: 2d:8a:08:04:0c:b3:b1:a5:3b:73:80:42:be:56:2f:38:b8:63: 72:5a:3e:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjUxMTAyMTcwMzU4WhcNMjUxMTA5MTcwMzU4WjAYMRYwFAYD VQQDEw02OTA3OGVmZi1iZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf7Lc2iXZTR5GW5A+E3r/tlIX0PUHvm6nKRDR07tAZ2moJOJbvn2o4L20N11 Txj/o5xHvQpyWA/SXsFsV7Tl5Mwx75Y1IKGaSKXMXxVoGWIcs4wGf2NeIje+UJau baYze0UH46LpTTjp3aijZzmEPS++xX/CjtPzdAw1CMzEktRGxe21RvNN0UMzSSY8 b5LgBO4SKOuEyDTbWnseNPUHTYBJq94KqLK6fLttrbDQLEGrKjVQ4DrLAcOO99nZ TlGTF71YKRyMndQoM6QGRnK3+mkrMI5i/bO6qqKhgzkGRi7Aez2wFWBFcpsugYgg +xqEQCk2cFHAgklZ6y4rZ0GrNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLegdqce 7HNmC4sG9stv7a2OpopqMB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqgGJN+ygZwMr9Iczns2Mm130B6wboIjXBmdFb010XYlWbwaMb0RZa xy+87vv32MbzZgG8nFQy4r53rUfljTSdOtfi/Ov6fA79D8TI2i6jTUrjHLoFTTCr FUzUlmr9Qc0LktSXKxasMcaEPxuJmLvEt/LaT9be/W9lOVJN5P11r0+CAOvw0JXZ XXH4U7JmiJsUOnuj5OQAsqQGxOiiUmeC18MTA4mIl+YBAaZoZMgVUvOZyjGVh2EP 90Y7cMhTKwApb8BlJ10ex8LC+xqjnhM4fs5LZzGrMUaipx70IgyLOYcwxkkCO03T 1+UtiggEDLOxpTtzgEK+Vi84uGNyWj4R -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:26 2025 by rpki-client